chore(deps): pin dependencies

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
app-sre · Oct 29, 2024 · 91c4b13 · 91c4b13
1 parent 33e733e
commit 91c4b13
Show file tree

Hide file tree

Showing 12 changed files with 15 additions and 15 deletions.
diff --git a/debug-container-fedramp/Dockerfile b/debug-container-fedramp/Dockerfile
@@ -2,7 +2,7 @@
 
 # NOTE: postgres utils here are set to v14 by design
 #FROM registry.access.redhat.com/ubi8/ubi:8.8
-FROM registry.access.redhat.com/ubi8/ubi:8.8
+FROM registry.access.redhat.com/ubi8/ubi:8.8@sha256:c94bc309b197f9fc465052123ead92bf50799ba72055bd040477ded452d87a0d
 
 RUN dnf -y --refresh --security upgrade && \
     dnf -y install dnf-utils \

diff --git a/debug-container/Dockerfile b/debug-container/Dockerfile
@@ -1,6 +1,6 @@
 # Locking this to a specific Fedora version for now. New releases of Postgresql, and Fedora versions going out of
 # support will drive this upgrade every 6-12 months.
-FROM quay.io/fedora/fedora:39
+FROM quay.io/fedora/fedora:39@sha256:88b3e87a5971d727e1ac7e271cc853e1bcf77ec092a710a688e26c3561442c69
 
 RUN dnf -y update && \
     dnf -y install \

diff --git a/dynatrace-ci/Dockerfile b/dynatrace-ci/Dockerfile
@@ -6,7 +6,7 @@ FROM ${TERRAFORM_REPO}:${TERRAFORM_VERSION} as terraform
 COPY providers.tf .
 RUN terraform providers mirror -platform=linux_amd64 /plugins
 
-FROM registry.access.redhat.com/ubi9/ubi-minimal:9.2
+FROM registry.access.redhat.com/ubi9/ubi-minimal:9.2@sha256:c8c7a06ce1c5fa23c1cbd7a0fd891eacd099bc232aa9985ddb183cfe98d1deaf
 
 WORKDIR /terraform
 

diff --git a/dynatrace-config-job/Dockerfile b/dynatrace-config-job/Dockerfile
@@ -1,4 +1,4 @@
-FROM registry.access.redhat.com/ubi9/ubi-minimal:9.2
+FROM registry.access.redhat.com/ubi9/ubi-minimal:9.2@sha256:c8c7a06ce1c5fa23c1cbd7a0fd891eacd099bc232aa9985ddb183cfe98d1deaf
 
 # https://konflux.pages.redhat.com/docs/users/how-tos/configuring/custom-tags.html
 # Set your image version here

diff --git a/jiralert/Dockerfile b/jiralert/Dockerfile
@@ -1,4 +1,4 @@
-FROM registry.access.redhat.com/ubi8/go-toolset:1.20.12 as builder
+FROM registry.access.redhat.com/ubi8/go-toolset:1.20.12@sha256:43cf2468d9ebecbdf69503ca9cfb4a7c58ee86c94b64fb024c8aebd1bedc816e as builder
 ENV GOPATH=/go/
 ENV GO111MODULE=on
 USER root
@@ -9,7 +9,7 @@ RUN git checkout d43cbab62126d543e8e789f6374d9e745693cce2
 # run just build and skip all other steps because the linter needs to much memory
 RUN make build
 
-FROM registry.access.redhat.com/ubi8-minimal:8.9
+FROM registry.access.redhat.com/ubi8-minimal:8.9@sha256:2fa47fa9df7b98e2776f447855699c01d06c3271b2d7259b8b314084580cf591
 RUN microdnf update -y \
     && rm -rf /var/cache/yum \
     && microdnf install ca-certificates

diff --git a/lablabs-cloudflare-exporter/Dockerfile b/lablabs-cloudflare-exporter/Dockerfile
@@ -1,4 +1,4 @@
-FROM registry.access.redhat.com/ubi8/go-toolset:1.18.9 as builder
+FROM registry.access.redhat.com/ubi8/go-toolset:1.18.9@sha256:4b55f47e67e019eda42d7f959918cfa53b6d0580b73234b46675bc598e9e2e4e as builder
 ENV GOPATH=/go/
 ENV GO111MODULE=on
 USER root
@@ -9,7 +9,7 @@ RUN git clone \
 # RUN go get -d -v
 RUN CGO_ENABLED=0 GOOS=linux go build -o cloudflare_exporter .
 
-FROM registry.access.redhat.com/ubi8-minimal:8.5
+FROM registry.access.redhat.com/ubi8-minimal:8.5@sha256:3f32ebba0cbf3849a48372d4fc3a4ce70816f248d39eb50da7ea5f15c7f9d120
 RUN microdnf update -y \
     && rm -rf /var/cache/yum \
     && microdnf install ca-certificates

diff --git a/logrotate/Dockerfile b/logrotate/Dockerfile
@@ -1,4 +1,4 @@
-FROM registry.access.redhat.com/ubi9/ubi-minimal:9.4
+FROM registry.access.redhat.com/ubi9/ubi-minimal:9.4@sha256:c0e70387664f30cd9cf2795b547e4a9a51002c44a4a86aa9335ab030134bf392
 
 # Install logrotate
 RUN microdnf update && \

diff --git a/metrics-api-server/Dockerfile b/metrics-api-server/Dockerfile
@@ -1,4 +1,4 @@
-FROM registry.access.redhat.com/ubi9/python-311
+FROM registry.access.redhat.com/ubi9/python-311@sha256:129391e5b291e29a3b24a3fdb281a56d7cb8297bdf8ba92bb5c8581b53084324
 
 WORKDIR /app
 

diff --git a/packer/Dockerfile b/packer/Dockerfile
@@ -1,4 +1,4 @@
-FROM registry.access.redhat.com/ubi8/ubi-minimal:latest
+FROM registry.access.redhat.com/ubi8/ubi-minimal:latest@sha256:7583ca0ea52001562bd81a961da3f75222209e6192e4e413ee226cff97dbd48c
 
 RUN curl --location --output /etc/yum.repos.d/hashicorp.repo https://rpm.releases.hashicorp.com/RHEL/hashicorp.repo
 RUN microdnf install packer jq openssh-clients unzip rsync python3 rust cargo gcc python3-devel openssl-devel

diff --git a/qontract-reconcile-base/Dockerfile b/qontract-reconcile-base/Dockerfile
@@ -1,4 +1,4 @@
-FROM registry.access.redhat.com/ubi9/ubi:9.4 AS downloader
+FROM registry.access.redhat.com/ubi9/ubi:9.4@sha256:ee0b908e958a1822afc57e5d386d1ea128eebe492cb2e01b6903ee19c133ea75 AS downloader
 
 RUN dnf -y install unzip glibc-langpack-en
 
@@ -88,7 +88,7 @@ RUN curl -sfL https://github.com/prometheus/alertmanager/releases/download/v${AL
     | tar -zxf - -C /usr/local/bin --strip-components=1 alertmanager-${ALERTMANAGER_VERSION}.linux-amd64/amtool
 
 
-FROM registry.access.redhat.com/ubi9/ubi-minimal:9.4
+FROM registry.access.redhat.com/ubi9/ubi-minimal:9.4@sha256:c0e70387664f30cd9cf2795b547e4a9a51002c44a4a86aa9335ab030134bf392
 
 ENV TF_PLUGIN_LOCAL_DIR=/usr/local/share/terraform/
 ENV TF_PLUGIN_CACHE_DIR=/.terraform.d/plugin-cache/

diff --git a/qontract-reconcile-builder/Dockerfile b/qontract-reconcile-builder/Dockerfile
@@ -1,4 +1,4 @@
-FROM quay.io/app-sre/qontract-reconcile-base:0.14.0 as base
+FROM quay.io/app-sre/qontract-reconcile-base:0.14.0@sha256:bd6f0de349fab0cce58ba9e5b0f01296688f26038b1ac3730b04eb8c270e255c as base
 
 WORKDIR /work
 

diff --git a/qontract-reconcile-oc/Dockerfile b/qontract-reconcile-oc/Dockerfile
@@ -1,4 +1,4 @@
-FROM registry.access.redhat.com/ubi9/ubi:9.3
+FROM registry.access.redhat.com/ubi9/ubi:9.3@sha256:66233eebd72bb5baa25190d4f55e1dc3fff3a9b77186c1f91a0abdb274452072
 
 WORKDIR /work